CVE Vulnerability Catalog

Path traversal vulnerability in the download_markdown/list_downloaded_files/create_subdirectory functions in src/index.ts in markdown-downloader. Manipulation can lead to access to files outside the application directory.

SQL Injection vulnerability in the Access Manager role. An attacker can inject malicious SQL queries.

Path traversal vulnerability in the handleInitializeMemoryBank function in src/index.ts in cline-mcp-memory-bank. Manipulation of the projectPath argument allows access to files outside the application directory.

debugmcp mcp-debugger up to version 0.20.0 has a path traversal vulnerability in the handleGetSourceContext function in src/server.ts. Attackers can manipulate paths to remotely read files outside the allowed directory.

Tiandy Easy7 Integrated Management Platform version 7.17.0 has a vulnerability in the /rest/user/updateUserPassword API endpoint. Manipulation can lead to weak password recovery. The attack can be executed remotely, and the exploit has been publicly disclosed.

Apache Syncope versions 3.0 to 3.0.16, 4.0 to 4.0.5, and 4.1.0 have a sensitive information disclosure vulnerability via malicious JEXL expressions in Derived Schemas. An administrator with sufficient entitlements can access user-related security-sensitive information.

Vulnerability in YunaiV yudao-cloud 2026.03. The IotDataSinkHttpConfig function in /admin-api/iot/data-sink/create of the Admin API Endpoint allows server-side request forgery (SSRF). Remote attack, exploit publicly available.

Firefox for iOS incorrectly displayed specially crafted RTL and IDN domain names in the link preview UI. This could allow an attacker to impersonate trusted origins. The vulnerability was fixed in Firefox for iOS 151.1.

The hackney library for Erlang/OTP versions 0.13.0 through 4.0.1 contains a Server-Side Request Forgery (SSRF) vulnerability due to an interpretation conflict. The URL normalizer decodes the host after validation, allowing bypass of allowlists and access to internal IP addresses (e.g., 127.0.0.1, 169.254.169.254).

The hackney library versions 3.1.1 before 4.0.1 is vulnerable to sensitive data exposure. The HTTP/3 module (hackney_h3.erl) does not perform cross-origin checks on redirects, causing authorization headers and cookies to be sent to foreign hosts.

A CRLF Injection vulnerability was found in the hackney library (versions from 0.9.0 before 4.0.1) in the hackney_cookie:setcookie/3 function. An attacker controlling the domain or path option can inject a CRLF sequence and arbitrary Set-Cookie headers, leading to HTTP Response Splitting.

Notebook Pro 2.0 has a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. An attacker can create a malicious text file with 500+ characters and paste it into the field, causing a crash on save.

Admidio 3.3.5 contains a CSRF vulnerability that allows low-privilege users to escalate their privileges by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting roles_function.php with parameters like rol_assign_roles, rol_approve_users, and rol_edit_user set to 1, leading to privilege escalation without authentication.

Visual Ping 0.8.0.0 contains a buffer overflow vulnerability in input field handling, allowing local attackers to crash the application by supplying oversized data. Attackers can inject malicious payloads exceeding 4108 bytes into the Host, Time Out, Packet Size, Pause, or Loops fields to trigger a denial of service condition.

NASA openVSP 3.16.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the geometry name field. Attackers can trigger a denial of service by pasting a 5000-byte payload into the name input field in the Geom browser interface.

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from authenticated user sessions.

Soroush IM Desktop App version 0.17.0 contains an authentication bypass vulnerability. A local attacker can remove passcodes by injecting pre-encrypted database entries using a constant encryption key, gaining access to all stored data, chats, images, and files without knowing the original passcode.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /process/applyleaveprocess.php. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /psubmit.php. The attack can be performed remotely and the exploit is publicly available.

A SQL injection vulnerability has been found in Employee Management System 1.0 in the file /changepassemp.php. The attack can be performed remotely and the exploit is publicly available.